WHAT IS CLAIMED IS: 

1 1 . A method for checking network perimeter security, said method 

2 comprising the steps of: 

3 reviewing security of a network perimeter architecture; 

4 reviewing security of data processing devices that transfer data across the 

5 perimeter of the network; 

6 reviewing security of applications that transfer data across said perimeter; and 

7 reviewing vulnerability of applications or data processing devices within said 

8 perimeter from computers or users outside of said perimeter. 

1 2. The method as set forth in claim 1 further comprising the step of 

2 reviewing security of data processing devices within said perimeter that authenticate 

3 computers or users outside of said perimeter that request to access an application within 

4 said perimeter. 

1 3. The method as set forth in claim 1 further comprising the step of 

2 reviewing security of data processing devices that authorize computers or users outside of 

3 said perimeter that request to access an application within said perimeter. 

1 4. The method as set forth in claim 1 wherein the step of reviewing security 

2 of said data processing devices comprises the step of reviewing security of a web server, 

3 an e-mail server or an FTP server. 
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5. The method as set forth in claim 1 further comprising the step of 
reviewing security of a server within said perimeter that provides data to said data 
processing devices that transfer data across the perimeter of said network. 



1 6. The method as set forth in claim 1 wherein each of said reviews is 

2 performed by comparison to a security policy of an enterprise which owns or controls 

3 said network. 

1 7. The method as set forth in claim 1 further comprising the step of 

2 determining said network perimeter. 

1 8. The method as set forth in claim 7 wherein said network perimeter 

2 comprises entries and exits from said network. 

1 9. The method as set forth in claim 1 wherein said network perimeter 

2 comprises entries and exits from said network. 

1 10. The method as set forth in claim 1 wherein the steps of reviewing security 

2 of a network perimeter architecture, reviewing security of data processing devices that 

3 transfer data across the perimeter of the network, and reviewing vulnerability of 

4 applications or data processing devices within said perimeter from entities outside of said 

5 perimeter are performed at least in part with a respective program tool. 
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1 11. The method as set forth in claim 1 wherein the step of reviewing security 

2 of said data processing devices comprises the step of reviewing security of data 

3 processing devices accessed by users outside of said perimeter. 
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